[NTLUG:Discuss] Forwarded Question: Firewall setup issues

[m m]

Hi all:


>From: "Daniel L. Shipman" <webmaster at srj.net>
>Reply-To: discuss at ntlug.org
>To: <discuss at ntlug.org>
>Subject: Re: [NTLUG:Discuss] Forwarded Question: Firewall setup issues
>Date: Mon, 26 Jun 2000 10:53:12 -0500
>
>No - don't use the IPS - do this
>
>set eth0:0 to the specified stuff gateway broadcast netmask etc.
>get ipmasqurade
>set eth0:1 to be 192.168.1.1
>set the IPs of the local machines to hit 192.168.1.1 as the server

would you take an example for me?
these local machines are different form the ones you mention below?

this is the diagram I think should be (correct me if I am wrong)
Internet -- Firwall --- webserver
                |
                |------- networking

which machines are talking about? the firewall one?

>set the ips of the local machines in /etc/hosts to be within the 
>192.168.1.*
>block

the following is from Gregory's reply

> >From: "Gregory L. Camp" <Gregory.Camp at osc.com>
> >-----Original Message-----
> >From: m m [mailto:llliiilll at hotmail.com]
> >Sent: Sunday, June 25, 2000 5:22 PM
> >To: discuss at ntlug.org
> >Subject: Re: [NTLUG:Discuss] Forwarded Question: Firewall setup issues
> >

>If I read your question correctly, you want to assign the firewall to 
> >serve multiple IPs?  You can do that if you really want to (the NIC >will 
>have eth0:0, eth0:1, etc. for as many ips as you assign to it), >but most 
>web servers allow you to look at the incoming request and >show the 
>appropriate page.

Yes, That is what I want. and I need help on this issue. I am studing the 
Firewall and IPCHAIN (going to add IP Masqurade, NIC) HOWTO.

>For example, www.here.com and www.there.com could both go to the same 
> >machine, but the webserver reads the "Host Header Name" to determine 
> >which web page to show.  I know apache lets you do this.  Look for 
> >config options for "Virtual Servers" I believe.  It's been a while, so >I 
>don't recall the exact parameters you would need to change.

I know this.

>If you really want to use multiple IPs, that should work also.  You >just 
>setup the firewall rules for the appropriate eth0:? number and >that should 
>take care of it.

Again, That is what i need to know. Could you give some hint or refer me 
some site or materials for me?

Thanks a lots.

jc

________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com